Case study - SOC 2 Type I in month three for a 22 person SaaS
A 180 question buyer security questionnaire, then a SOC 2 Type I.
- System
- 22 person SaaS company
- When
- Previous engagement
- Service
- SOC 2 readiness and security lead
Overview
A 22 person SaaS company received a 180 question buyer security questionnaire and needed a SOC 2 report.
What we did
We answered the questionnaire in four days, wrote 14 policies around how the team actually works and built an evidence folder the auditor could sample.
Result
The SOC 2 Type I report arrived in month three. We then acted as the monthly security lead through the Type II audit period.
What it touched
- SOC 2
- Questionnaires
- Policies
- Security lead
- Questions answered in 4 days
- 180
- Policies written
- 14
- SOC 2 Type I
- Month 3